- Always apply host-based allows/denies even in var.ACCOUNTS_ONLY is set - Fix display of mixed-mode allows/denies for a particular user - Make -acc and -host switches operate more intelligently on both the bare command as well as when given an argument