Post #1103724

@ada @lanodan @ska also to note there's applications that don't run as root, but that do access the socket, e.g. anything started with User= / command_user= which is a thing i didn't account for actually, so i should probably chown the per-service socket when non-root is using it