make sure loopback is always allowed