Unable to limit port 9000 to localhost

All you need to do is setting SENTRY_BIND to 127.0.0.1:9000 and leave everything else intact. That should work.