sample security-fixes file for vhosts