Block all requests to hidden files in Nginx
Block all requests to config files.

PHP wouldn't display the config anyway, but let's block it just
to be safe.
Merge branch 'master' of github.com:Automattic/vip-quickstart
Don't run cron as root

New files should be assigned to `vagrant` as the owner, not `root`
Merge pull request #270 from danielbachhuber/patch-2

Don't run cron as root
Create home directory for vagrant user by default

Fixes #271
Merge branch 'master' of github.com:Automattic/vip-quickstart
Don't update plugins from Github in Puppet.

This is breaking the local git repos. With repo monitor, it's
not really necessary to update these repositories during
provisioning anyway.

See #255
Don't check out the full public themes repo

We need twentyfourteen because it's the default theme. Most people don't use the public themes anyway. We can address this later with the repo monitor.

Fixes #199
Merge remote-tracking branch 'upstream/master'