You can't trust localhost to be localhost-only (security fix for Guile)