[auth] honor host as bind address