PulseAudio native TCP server

For localhost (e.g., ssh forwards) only, without cookie: pactl load-module module-native-protocol-tcp auth-ip-acl=127.0.0.1 (combine IP addrs/subnets using comma)

For everyone without cookie: pactl load-module module-native-protocol-tcp auth-anonymous=1

TCP with cookie: pactl load-module module-native-protocol-tcp

Cookie

The server uses cookie (working just like Xauthority) for auth. It's location is provided in $PULSE_COOKIE, or, if not defined, in .config/pulse/cookie.