I'd be a +1 for domain-based restriction, just as it makes implementing a leaky paywall easier (I've got a series of chocolate making videos coming up that'll be behind a simple password gate, and would make things simpler to not have to implement URL-signing).
