command/monitor: fixing #26, bind to localhost only