add injectionsafe option to proxy vhost