security fix: related hosts, updater host configs: check if current user is creator of main host