We have set it up in a dev environment with the RS service being a middle tier.  We used Windows security for the App->RS Server security but kept the database connection to a database user to keep things simple in our environment. 

Thanks.