Allow embedding only for specific domains, for privacy reasons.