restrict named pipe to local use