Merge "init: harden socket creation against symlinks" into nyc-dev