Allow for reverse proxy as authentication option
Only allow proxyhosts to access broker directly

Broker should allow 127.0.0.1