@lolaswift1 with the PWA, like a website, you could block the domain in the key. But like @joshmorony well explained, if you think fully about it, there is probably some questions too
about your case, could you link it here in this issue? in case of private issue, you keep us posted?