That is kind of my point. Limiting IP can and will be a potentially hazardous setup if an admin works outside the business world 
If such a security measure is needed and there is only one admin and the admin is using an IP that can and will change, then using Varnish or a similar frontend for Discourse is a safer solution (unless the shell gives a backdoor).
(Oh dear how much proofreading fixes my text 
)