We should probably also have a test with a non-empty path in the Origin to show that paths (unlike subdomains) are ignored.