com32/chain: allow service-only runs