Define the minimum machine networking surface for the next host slice and limit exposed guest ports to SSH and VNC.