check host constraint instead of rack, add refinement