if someone (not paying too much attention, or malicious)
appends a !uid=xyz attribute to a hostid that already
has an uid=* attribute, then speaksfor("xyz", hostid) will
return true.