First pass at enabling logon-as-service in windows_service (CHEF-4921).

Can you break the substitution out into a function that explains what it does