service can run as specified user now. recommend to use LocalService or VirtualAcounts for security.