Network allowlist

The vetted domains sandboxed execution can reach when egress is set to limited.