serve security: local bind option + whitelist