Add protection in /hosts.allow, /hosts.deny for 'vagrant'