Refuse access for guest via non-localhost by default.