do not limit rule to single interface

`on lo0` limits pow to local requests, which excluded xip.io domains.
now, `to self` limits it to local interfaces, and even leaves mapping to other interfaces, like vmnet, intact.