restrict shutdown to localhost only