only run hosts clean up on controllers