Another thought, should or could we just use Host#enforce_permissions here, which would also check the user's allowed to edit this particular host..?  Or perhaps it doesn't make sense to couple the NIC that tightly.