api,app,service: bind/unbind now stream response to client, closes #963