On the flipside, now you need to validate your input in one more way if you don't want to accidentally be connecting to somewhere on the internet.

EDIT: for instance, it looks like on a suitably configured environment, passing in `s3://` and `gs://` URLs works fine too...