PermittedHosts validator