substrate: safer finding of Vagrant