command line option to always allow requests from localhost