how/where to configure access to libvirt-sock-ro