Use a new docroot for Kibana 3; this location won't be browsable as a folder off of the web server's address, so Kibana 3 can only be accessed through the virtualhosts.