since presented information is personel and somehow security-critical
listen only on localhost per default