Fix for #10

Now checks services against OS version, can have an OS version manually
specified (not really recommended, but in case you wanted the
functionality, there you go), and cleaned up broken code that prevented
new root-level TCC databases from being created properly.