- socket overwriting problem; use directory trick?
- strengthen default permissions on socket
- document per-app socket naming intention
- hash secret key, salted with 'exmachina'