make socket permissions configurable