it does not acquire the service lock for the entire length of a pailgun request, which means 2 is potentially an issue (we could shut down services while a request is running)... but as i said, i'm ok with that.