ensure service only listens on localhost