security: only bind localhost