add a nicer way to declare host access