title: Selective Service permissions, binding only
body: <p>Is it possible to restrict access to a <code>Service</code> such that a client can only bind to it?  For example, I want clients to access the service's AIDL API, but do not want them to be able to call <code>startService()</code> or, more importantly, <code>stopService()</code> on the service.</p>
  
  <p>I have tried using the <code>android:permission</code> attribute within the <code>&lt;service&gt;</code> tag of the manifest.  This works for restricting access to <code>startService()</code> and <code>stopService()</code> but binding to the Service configured in this way results in:</p>
  
  <blockquote>
    <p>java.lang.SecurityException: Not allowed to bind to service</p>
  </blockquote>
  
  <p>Any thoughts?</p>