Use a control socket directory to restrict access