This message was deleted.

slight correction: when I mean "exposing the etcd interface", I mean still exposing etcd/kine's server socket over TCP

No. You can point etcdctl at the Kine socket though, if you really want to poke at it. If you're using embedded etcd it listens on both the private and loopback addresses.

ah, if it's already a different kind of socket, then it can be exposed by other means when desired, which effectively answers the question, thanks!