add salt state: hosts.allow/deny