XDP-for-windows should expose a new device object that can be used to control AF_XDP sockets, but not to configure programs.
This will enable application to define more granular permissions between processes that can use AF_XDP sockets, and processes that can configure programs and redirection rules.