TransportSecuritySettings.allowed_hosts=[] (default) silently rejects external Host headers with HTTP 421

TransportSecuritySettings.allowed_hosts=[] (default) silently rejects external Host headers with HTTP 421 #2526