a bunch more matchable docs and limiting the backdoor to localhost only