Only allow localhost binding