refactor param-name to trusted.hosts