bugfix: actually using host-specific rules too