Grant @% if any IP, including 127.0.0.1, is used because it works if skip-name-resolve is enabled.