cache, domain/path restriction