ap-dnsproxy: use socat instead of nc to avoid blocking clients