True, I agree with adding more security.
Personally, I would use the hostmask for it.