Zapier blocks domains by default for security, requiring developers to add approved domains for embedding. via Zapier