Listen (locally only) for pprof connections. Allow them to be disabled.

Yes.