exact-token-authority host OK