"Network" is too broad. What you really want for most apps is "can only talk to its home domain from which it was downloaded".