Add some validation for externalized service ports.

@brendandburns, reviewers: how did this get in. We shot this down in https://github.com/GoogleCloudPlatform/kubernetes/pull/1264#discussion_r17396033; no cluster-wide constraint should be checked by validation! No RPCs or things that look like RPCs should be performed by validation!