I think that's right. It would also need some ability to add mappings like "when I log in from gmail.com, hash like it is google.com"