Based on changes from @ebfe:
Let sndio drop privileges so it creates a unix socket clients can find
(/tmp/aucat/aucatX). Add sndiod to the audio group so it can access
/dev/snd/* devices. Use the primary group for it to let sndiod use the
right path for the listening unix socket.