Another little gotcha ... URL whitelisting.
Since this is open to many deploys, we have to allow everything.