VIF: in Interface.online, add the port-locking rules

We shell out to setup-vif-device for now, but we should convert
this into a library at some point.