add note on salting the hosts