eval protection

split out tcplisten?

server side needs to know which network interface to use?

more (some!) documentation