serve security: local bind option + whitelist

support optional whitelist of allowed hosts
add local option to bind to localhost
warn if local option not provided