merged expose-watch-exposed-flag [r=niemeyer,hazmat][f=788825]

Updates ServiceState.watch_exposed_flag such that the watch only
returns after processing current state; it is permanent; the client
connection is guarded; and it is stateful and reliable.