v3 Status Handler CIDR ACL

[Tom Zeller]

>>Is there a particular reason to distribute jetty-base listening only on
>>localhost?  Maybe I missed the rationale.
>
> The only reason it's there now is for the integration tests, and we don't
> want the Jenkins tests to spin up a server on external interfaces.

Should we default to listening on all interfaces instead of only localhost ?

I guess I was thinking it was "safer" or "polite" to not listen
externally by default, but maybe that is wrong.