No external access allowed! (except as service)