decouple external address from callbacks address

may want to advertise a public route, but listen on a local address so
that health checking also works
scheduler: respect -noop