change method name to `allowingInternalTcpPort`? And same below?
(but then jclouds convention of `inboundPorts` sets a precedent of defaulting to "tcp".