Constrain devfs_rule for VM feature

[gronke]

The devfs rule that unhides vmm/* can be further constrained.

devfs_ruleset.append("add path vmm/* unhide")

This changes apply on top of #605 as pointed out in #605 (comment)

[igalic]

The same should be done in #140