Always cloak client hostname, if needed