Hooks do not rewrite TLS hosts