allowed hosts to allow all klab subdomains