(License key validation requests go to tabnine.com, so you should blacklist that too if you want to deny all network access.)