This has the disadvantage that you can’t whitelist specific domains, which is something I need pretty often.