Warn about remote requests with option to block

Adds a new request filter with three modes:

* Warn on an outgoing remote request (default)
* Stub out remote requests with an empty response
* Allow remote requests without a warning
* Allow adding custom localhost definitions
allow/block localhost was renamed to remote, but we still have `add_localhost`. Perhaps this could be renamed to `allow_remote_host` or similar?