Both are achieved by opening the socket from main and passing it to the ctlsock package instead of passing the path.
You used to be able to crash gocryptfs by passing "/foo" of "foo/" to the ctlsock. Fixes https://github.com/rfjakob/gocryptfs/issues/66
At the moment, in forward mode you can only encrypt paths and in reverse mode you can only decrypt paths.