Only protect the graphite vhost