[rcxdude]

It's non-obvious, but if you click on the check-mark instead of the slider button, it'll be allowed on one domain only. Annoyingly, it doesn't use a tooltip but tells you what the button does after you click it.