Only allow connections to backends listed in service discovery

This prevents connections to stale backends, which could cause a security issue of the addr/port is reused and the
cookie is replayed.

Signed-off-by: Jonathan Rudenberg <jonathan@titanous.com>