I believe I have answered my own question here.
When you specify the service account during installation, its not for the actual vCenter Single Sign-On service, but a RSA SSPI Service. The first service runs as system, and from the looks of it, changing it causes problems.