allow all federal domains, not just .govs, + tests to validate.