Reopening per previous comment. Hmm, overall maybe we could just give up on hosts.* as this should be handled by firewall anyway?