pub fn socket_path(state_dir: &Path) -> PathBuf
Where the socket lives: the state directory, which is outside the scan and shared by every container in the pod.