built-in "ctl" xrequest handler, supporting keep-alive messages