Now filtering at the app level.

This is much better than whitelisting certain IPs. You never
known just what an app is going to connect to. This led to
me not whitelisting enough and getting half functioning apps.
Updated documentation