Session Engine needs to bind to 179/tcp we have the parent process open the sockets and doing the binds, and then pass the file descriptors to the SE see recvmsg(2) parent needs to keep track of which fds the SE has open, so it doesn't bind() again to the same ip/port the SE can run as _bgpd:_bgpd and chrooted to /var/empty, too