Code Access Security: grant ServiceController permission to a .Net

I have a .NET application (.exe) that I want to run under a Windows XP
'Limited' account (i.e. non administrator)
I want this application to be able to control (Start/Stop) a Windows Service
So:
How do I give my app the permission to be a ServiceController?
and
How do I configure this at install-time (e.g. by issuing CasPol commands)?