Host reports whether host names this machine: "localhost", a loopback IP
address, or a Unix socket path. Nothing off the host can observe traffic to
it, so transport encryption there protects nothing and adapters admit
plaintext without an explicit override.