Kind of shocking this facility doesn't exist already, but even if only 3 top-level domains are allowed, sub-domains of those 3 TLD's need to be allowed as well. Not happy this isn't an available feature having just signed up for Family.