similar to linux's ext deferaccept, to filter incoming connections before accept.
Unix{Datagram,Stream}::{set_}passcred()