Monitor docker socket

[vadorovsky]

After #57 is done, we need to monitor docker socket somehow to make sure that only root user applies lockc labels.

No clear idea how to do that yet. Figuring that out is the part of this task.