That process is called security-module (sec-mod) and communicates with the workers using a unix domain socket.