Looks like it's a very desirable security feature.
Issue for core is at: https://drupal.org/node/256965
Mostly late for 8.x, but worth the effort for 9.x.

Comments

christefano’s picture

christefano commented

Thanks, amontero! I agree this should be in Drupal core and have replied at https://drupal.org/node/256965#comment-8363867