require passwords from some hosts only