Slices can be attached to arbitrary Services

[scottmbaker]

There's no access control on what services Slice.Service can be set to. For example, someone could add an unauthorized slice to a service such as HPC, thus causing HPC to try to use that slice.

Slice.service is not well documented in the developer UI, and new users may just pick something randomly on the list thinking it's a mandatory field.