http://stackoverflow.com/questions/19711716/apache-restrict-access-to-specific-source-ip-inside-virtual-host
Anonymous
Separate policy from mechanism, separate interfaces from engines.