However, if I try the same on <project>.server.Services->New Service; name it "BugService" and click on Finish, the files are created as follows:
Note that the three Permission files are created in the services.process package instead of the security package.
I can reproduce this with the Scout SDK 3.9.1 (Kepler SR1) and 3.10 (the nightly Luna build).
Is this intended? Or have we stumbled across a long sleeping bug?
I'd be happy to create a bug, but before I do so I wanted to check that it really is a bug.