Credential Management: Prohibit use in cross-origin iframes