Something

service swat
{
        port            = 901
        socket_type     = stream
        wait            = no
        only_from       = khronus-rules
        user            = root
        server          = /usr/sbin/swat
        log_on_failure += USERID
        disable         = no
}