rt: root writable config
fix rt start method, add socket dir

it turns out the socket is created with mode 0777 and it doesn't seem to
be configurable, so let's limit access to it by the directory mode.