Whitelist services which can access the file socket, refuse other connections. Fixes #12701 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>