Function mint_worker_credentials 

pub fn mint_worker_credentials(
    socket_path: &Path,
    scope: WorkerScope,
) -> Result<(WorkerCredentials, UnixListener), String>

Binds a worker socket and mints the token that authenticates against it, scoped to what the token may do. Returned unregistered: the caller decides who serves the socket, and no request can be answered before it does.