protect some services to be run in mastersalt mode, cc @regilero