auth: Don't overflow hostName array