security-manager: Restrict socket accesses