always restrict to seed domains.