Constant LABEL_DAEMON_SOCKET 

pub const LABEL_DAEMON_SOCKET: &str = "zlayer.io/daemon-socket";

Label opting a service’s containers into having the host daemon Unix socket bind-mounted (Docker-in-Docker / container-management workloads). This grants the container full daemon admin via the socket auto-auth path, so it is off by default and must be set deliberately.