socket now only allows group members to connect; added systemd service unit