I think this should be resource_scope, so it obeys Host.my_hosts etc.