Sensitive egress should use a controlled domain allowlist.
