add note re: denyhosts