Authenticating infrastructure provider hosts