Allow-list to restrict federation to trusted domains (#853)