What about `is_pulling_allowed_from_domain?(src)` instead (or something equivalent)? 

I think this API would be cleaner (and remove that weird non-matching regexp)