Or maybe SURICATA_HOST_ or something. IDS might confuse IPS ppl? :)