I can think of a configurable list of trusted origins. Before you can connect from that origin, you have to add it using the CLI or the bundled consle.