Was the patch issued for 2.15 the allowed host/class check, or was the feature disabled by default entirely (which is what I thought I read was done?).