auth: Use the host header for the fetching of .yos_authority too