Add forbidden functionality to vhost::basic