Create a head node that only listens to localhost request for security reasons

I am currently using ray start --head to create a new redis server. But it listens to all ips, which can cause a security issue. Is it possible to bind the client ip it listens to as localhost? In other words, it will never respond to any request from another ip.