prefer to return "localhost" just because sometimes a stale VPN config can screw up, and failing is severe.