Ability to disable unauthenticated port when running in host mode

Using go2rtc with HomeKit cameras requires host networking, but the frigate docs recommend using a docker network since port 5000 is unauthenticated and shouldn't be exposed.

Since I have a HomeKit camera I'd like to use, I think I have two options:

1. Use an external instance of go2rtc that is on the host network, but forgo "enhanced live view (full frame rate and audio), two-way talk, and other streaming features".
2. Change frigate to the host network, but leave the unauthenticated port 5000 exposed externally.

It sounds like there are no plans to fully support external instances of go2rtc, so that leaves me with exposing port 5000 if I want all the features.

Instead, I would like to be able to disable access via port 5000.