Listen only on localhost by default -- Fix #12