When deny/permit is used in sip peer, does this only make sense when host=dynamic is used? What happens if host=ip is set? And if insecure=invite is set, does this override all above settings? Whats the relation of those seettings?