Perhaps add an optional ability to set a LanSweeper, instance specific "service key", configurable by the Administrator. A simple text string could suffice.
This key, if set, would be validated by the LS server instance for any LSPush direct requests in order to better secure service port 9524 from malicious inventory TCP requests. This might open the door to allow port 9524 availability on the internet for remote user/non-lan lspush inventory directly.