vhost: hide internal code