Allow CSR for asset host