It appears impossible to maintain the functionality of the local monit cli (which expects to connect over localhost) in tandem with autoconfiguration of m/monit (which uses the stanza in "use address" to communication back to the instance).
For example, this configuration will properly autoconfigure m/monit, but breaks the CLI:
set httpd port 2812 use address my-public-address.domain.com allow mmonit-host.domain.com allow user:pass
This configuration allows the CLI to work, but then m/monit cannot communicate without a manual override (as m/monit believes its public address is 0.0.0.0 when it is clearly not):
set httpd port 2812 use address 0.0.0.0 allow mmonit-host.domain.com allow user:pass