Currently this is not configurable - but it is a good idea to make it so. Next release....
as a pragmatic solution added the clients ip's to
but it would be nice to turn this lookup off.
personally if find that using request.getRemoteHost() is a