shim daemon to isolate external network connections from running daemon