fixes #5841 - use inner query when retrieving reports for subset of authorised hosts