AST-2007-027: Database matching order permits host-based authentication to be ignored