Enforce an exact domain match for WebFinger resolution