It seems that with the init config files generated by the run scripts, if any server/driver is compromised, it can take over the system, by requesting access to important services, such as those in the <parent-provides> section. It seems that to make init's config secure, one would have to explicitly name every service needed by a server and deny access to all others. Am I correct? If not, please enlighten me.