010-security.debian.org.conf: explicitly bind to localhost