I wonder if something like `validateHostname` is a more appropriate name for this function, since it's not doing any checks specified to "being an authority".