Implement proper constraints to change a default SSL service

Such as webadmin.

Unit tested