Clarify HOST_SYSTEM attacker position directionality