[plt-scheme] web server config

Hi,

I just started using the web server.  I notice that I can hit the 
"/conf/refresh-servlets" url from anywhere.  This is going to be a 
public website, so how do I make that url and others like it accessible 
only to localhost or otherwise protected? 

Also, can I define aliases for virtual hosts?  Something like:

(default-host-table
   (alias "acme.com"))
(virtual-host-table
   ("acme.com" (host-table ......)
   ("acme.net" (alias "acme.com"))
   ...

thanks,
Rob