net property on the deno.permissions worker option says if set to string[], the net permission will be requested with the specified host strings with the format "<host>[:<port>].", and hooking that seems like the easiest way to do this kind of permission filtering logic, but I can't figure out how to.