Use secrets for restrict_domain