Use a control socket directory to restrict access
[tinc] / src / bsd /
drwxr-xr-x   ..
-rw-r--r-- 7390 device.c