restrict stunnel to debian hosts