to prevent non-esxi hosts from seeing vmfs datastores which would be the most efficent place to configure lun masking?