extract_entire_host_domain: allow some of the user statements to be guarded