attempting to unset $host, $authority, or another var not in $object results in a forbidden error