kalua: hotplug: log if ifup.WAN is not during maintenance_window; always deny  SSH to public interface when not from $MONITORING_SERVERIP (new var)