New: support for restricting environments that stories can run against