added access restriction to oset (access to the active fakehost should also be required!)