Use `with_fileglob` instead of hacking `with_items` to use `ls`. Use handlers to only restart OS X services if defaults have changed.