I pondered that for a moment before posting, but really not too worried if the world might know service account names. No different than actual user accounts (easily pulled from email), service accounts can't have interactive sessions, and it's a far cry from knowing a service account name to actually somehow getting on the one machine that can even connect to that particular server with that particular service account. I don't intend to sound over confident, just following best practices resulting in a lot of layers.