Note that XrdSecGSITRUSTDNS is of course completely unrelated to host SANs.
Yes, my idea was to bypass the SAN problem altogether. May not work though. -Al