Local users authenticate via peer and all tcp/ip connections authenticate via md5. The iptables firewall will prevent access from all except for co-hosts and administrators.