Add some validation for externalized service ports.

Updated to use Conflict, which already has sufficient info for expressing this.