You can now ensure that a Credential can only be used in HTTP requests to a specific domain. If a restricted Credential is used in a HTTP request to a different domain, or in a non-HTTP Request Action, it will fail.