moving handling of service user to install_service_from_descriptor