Log: daemons: return ECONNREFUSED to new clients at shutdown
... instead of EPERM, because "Connection refused" is more understandable than "Operation not permitted" for that