Only redirect to *.gov.uk domains

Whilst we should be preventing mappings to anything but *.gov.uk at the input stage, we should provide an additional protection against gaps in that defence and against the possibility of the database being compromised.

I'm not totally sure about using the word "illegal" to describe this. Suggestions welcome.