A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups.