localhost-only access is a reasonable compromise