Restrict access by whitelisted FQDN. For example when we want `BASE_URL=secret.mydomain.com` I'd like to limit access to webserver with only such Host header.