Thank you very much for the detailed response. I hope a variant of your explanation will end up in the description for security.alternate-file-domain.