set host_permission as optional