I suppose my half-solution is to use the “Block or Allow” panel to block everyone not on my Safe list. But I can’t use a wildcard in the safe list, so I don’t know if adding ed.ac.uk will also allow eusa.ed.ac.uk.
Good god, I’m going to have to formally complain about this…