GetDefaultServices -> AddDataProtection with TryAdd

Should this take *configuration* as a parameter?