For example, almost every .onion domain uses http, so adding `*.onion` to whitelist them all would be very useful.