shieldHosts property
Hosts whose requests are signed AUTOMATICALLY — every dart:io request
(Dio, package:http, HttpClient) to them gets X-Nexus-Shield + a
single-use DPoP proof, with no interceptor to wire. Exact hosts
(api.example.com) or wildcards (*.example.com). Only your own API
belongs here — never third parties (maps, analytics), which would then
receive your token. Empty (default) = sign only where you ask
(shield.headers(), NexusShieldClient, NexusShieldDioInterceptor).
Implementation
final List<String> shieldHosts;