Use a control socket directory to restrict access
[tinc] / src / solaris /
drwxr-xr-x   ..
-rw-r--r-- 4341 device.c