My guess would be to give them a work-around set of permissions just sufficient to allow the service to be managed either via SQL Configuration Manager or some hack like an SC.exe batch file.

You could also set up Agent jobs to do this and use the proxy account to give the required permissions.

There are probably a million ways to this actually.

Paul