dial-only setting

[dovholuknf]

Currently devices are able to be set into 'host-only' mode which is great for a server, but client devices need to be able to control which services they are allowed to 'host' as well. As a user, I want to be able to specify which services I specifically allow to be hosted. Initial implementation could start as an "all or nothing"/binary option, but eventually I could see a need/desire for fine-grained, dynamic control over which services my client could bind, allowing me to override the controller.

[qrkourier]

This strikes me as critically important for adoption by the administrator of the device and network where the hosting tunneler is installed. In short, that administrator is not necessarily the same party that controls Ziti, and so there's no expectation that the device and network admin trusts the Ziti admin to only host friendly services for friendly Ziti clients.

[scareything]

possibly specify/enable this with an identity attribute e.g. secureTunneler