Refining 'restricted' domains for secure HubNet