I'm interested in configuring X to listen for TCP connections on localhost but no other interfaces so that I can use xmove via SSH without opening X up to remote TCP-based attacks. Is there any X configuration option to do so? I know I could add this to a firewall, but I'd much prefer to do it within X---it feels tidier.