Prevent route theft by removing the ability to update spec.host#9325