Restrict MTA-STS to the MX domains