providing either a port or a version/clustername pair to hba_entry should suffice