rethinkdb: make config closer to upstream, keep port opened only for localhost