bug: link-local / loopback entries in allowed_ips are silently accepted but never enforced

bug: link-local / loopback entries in allowed_ips are silently accepted but never enforced #180