strict-origin
This should show host/domain only.