Function control_dir_in 

fn control_dir_in(base: &Path, config_home: &Path) -> Option<PathBuf>

control_dir under base: base/ssh-<8 hex of config_home>, each level owner-only. A test can pass its own base.