Start services during paranoid mode

This allows us to start services, run the postgres add, and then disable sudo before a build runs, including vars being exported.
@joshk I know you already merged this, just wanted to let you know that there is a test that tests that the escaping is done properly here.