Instead have server determine if settings submission is by host (Security feature).