Restrict service to localhost only