---
type: task
status: draft
---

It should be possible for a host to enable access to its daemon's RPC socket
_but only for a specific other host_.

At the same time, the `isle` tool would need to be able to specify a remote host
to operate against. How this interacts with local state (like staged firewall)
needs to be dealt with as well.