Add constraint-based authentication for hostName; remove IP-based authentication