- set directory permissions properly (prevent unprivileged users
  from accessing sockets)