Make admin port only reachable from localhost by default (127.0.0.1:4985)

This prevents the potentially-catastrophic error where somebody doesn't
realize they have to block port 4985, and exposes the admin API to the
public.
Of course you can override this with e.g. -adminInterface=:4985