add loopback alias for jail ip
use security flags
remove ephemeral option