Enable control-socket by default, but only for root