How about defaulting to `@(def.acl)` instead of `0.0.0.0/0`? Functionally it should be the same but gives less the feeling of "we are accepting keys from anyone!", while still allowing the user to close it down independently of `@(def.acl)` after initial bootstrapping.