Sure, no problem. Should I just use the url as attr, or the whole statement? Url is nicer, whole statement enables us to do still `deny all` as well.