tool = "http_fetch"
mode = "deny"
max_taint = "secret"

[constraints]
hosts = ["internal.example.com"]