It doesn't need to be. The service creds can be on another host entirely.