Restricting Public API Key to Specific Domains