This may allow the. If both domains are served from the same cdn then the cdn may route to the address specified in the http header after unwrapping the tls header. Privileged account management.