Implement local-only network access

[debfx]

pasta should allow implementing a network access mode that allows only access to the local interface.