1st commit
rms..
chowned socket; set more restricted perms - 660
since docker 1.3.0 we can use variables 'anywhere'.