spec: don't collide with VM's metadata svc

Even though the spec mentions concrete address only "by convention", I think it should use one that doesn't interfere with cloud providers' metadata servers. This will also match current implementation.