encode services/login info from manifests
also include disk_image url attribute in use now, even though published rspec schema doesn't have it