add machine attribute
can ignore certificate per host