make-secnet-sites: Don't allow setting new VPN-level props when restricted.
[secnet] / debian / default
1 RUN_SECNET=no