document 4G volume change in changelog
Do not open SG for 6868 bosh agent port [fixes #215]

This is a security fix - external users could directly access the bosh_agent
on a microbosh.

`bosh micro deploy` accesses the agent on 6868 via an ssh tunnel