I use the -Djava.rmi.server.hostname=localhost option to make rmi listen on localhost only, but netstat shows the socket is listening on 0.0.0.0.>
Since Java 8u102 -Dcom.sun.management.jmxremote.host binds to the special ip address.