package-server: allow hostnames with underscore