OpenRefine currently does not support serving on unix sockets, but this should be trivial to implement. When time allows, we could submit a PR.
Listening on TCP ports in a context where other users have shell access means the proxied OpenRefine server can be accessed to anyone.