We try to disable/remove SA every where. You can also create a AD service account that way you have a user that can be used every where and given only the OS and SQL rights needed to perform the job.
We have 6 SQL Ad Service accounts to handle the various aspects of running sql services, jobs, backups, ect.
Joe