AGMServices it's optional but gets shoe horned at install time.
Even then, the installer itself has administrative access already, should they choose to do it then.