Refuse access for guest via non-localhost by default.
Allow checking an IP address as well as a socket.
Oops
Merge in default
Merge bug25603