Second step in decoupling the service controller, use the apiserver for writes too.

Addresses #1436 
Please copy the whole thing. You're (for example) blowing away the creation time here.