By default also allow localhost