It works, but there should be an option to only allow it in specific domains.