...or globally for those that care about privacy (then allow per-host as needed)