Link-local might be hostile; optionally allow it under hosts_open variable.