Start services during paranoid mode

This allows us to start services, run the postgres add, and then disable sudo before a build runs, including vars being exported.
@joshk Looks like the hosts addon is already updated to escape the input?