[Unit]
Description=toybox switchboard: the vats' only way out

[Socket]
ListenStream=/run/toybox/switchboard.sock
# only toybox may dial out: its service joins this group
SocketGroup=toybox
SocketMode=0660

[Install]
WantedBy=sockets.target