restrict snmp in permissive mode