Block DNS using Unbound and Tags


I wanted to reach out to the forum to see if anyone knows why when I attempt to setup domain tags in unbound. I get unbound-control error connecting: connection refused for port 8963. Has anyone been able to successfully get this to work? I would like to create domain filters based on source IP addresses. It looks like I have all the domain tag information correct but no matter what I try it blocks the control port which seems very strange why a domain tag would do anything with the control plane.