More restrictive session, less restrictive host