@9c97e872 The code that prompted this was GDM, where it's process of setting up a private communication channel is "call a D-Bus method that will return a socket path that you should try to connect to".

Returning one end of a socketpair would make sure it only communicates with the intended client, and as a bonus would work across mount namespaces. 

 @80f08b97 But they're still not confident enough to feed their own private source code into the public model, right?