* refuse empty passvoids against host auth