code: func (a *Handler) allowProxySearchResponse(sr *search.SearchResult) bool {
  	a.masterQueryMu.RLock()
  	defer a.masterQueryMu.RUnlock()
  	for _, v := range sr.Blobs {
  		if _, ok := a.domainBlobs[v.Blob]; !ok {
  			return false
  		}
  	}
  	return true
  }
docs: // allowProxySearchResponse checks whether the blobs in sr are within the domain
  // defined by the masterQuery, and hence if the client is allowed to get that
  // response.