I would have put IP address access restrictions on that at the very least. I may have even done something like that more than once for various tools in the past.

That way it acts completely open to people (or other servers) in the right places and denies all knowledge to anything else.