allow metadata network access