add rejectTLD option, off by default