rspamd: restrict addresses we disable checks for to localhost

By default this includes private network subnets, but those should really use authentication instead, if they want to skip checks.