Per upstream: > libvirtd-tcp.socket - the unit file corresponding to the TCP 16509 > port for non-TLS remote access. This socket should not be configured > to start on boot until the administrator has configured a suitable > authentication mechanism.