this seems better from a security standpoint since it limits the exposed services