You could add a simple Winform/WPF UI project to your solution and have it tweak/encrypt the service's .config file through SectionInformation.ProtectSection
It could be useful that it would ask the user if the service should be restarted when changes are done through the UI.