allow setting of expected DTLS cert hostname from AC