Restrict to localhost only.