Right now it's unsecured, but there's no CLI script to secure it. A CLI script isn't easily doable, since we don't know the name of the host, which is part of the address of a Host Controller's management resources.