The redirect-socket should be a capability reference to a socket-binding capability in order to benefit from model validation and tab completion.

See WFLY-7957 for a case of a user misconfiguring this and not understanding why it doesn't work.