added some fallback and `.status services` now obeys permission