improve hypervisor docs
keep Vagrant environment secure by default

export VAGRANT_INSECURE_PORT_FORWARDS=yes to allow access from other
hosts.