Use secrets for restrict_domain
Use secrets for restricted_domain666
Make sure we can get a matching_selector for ruby exceptions where there isn't a key_line