Function peer_is_session_user 

pub(crate) fn peer_is_session_user(fd: RawFd) -> bool

Whether a socket’s peer runs as this process’s user or as root, who passes the socket’s mode anyway: one that connected before restrict_to_owner is refused here.