If that's the case, integrating Keygen server-side using a custom domain e.g. licensing.example.com would get around that, but so far this hasn't been an issue

If that's the case, integrating Keygen server-side using a custom domain e.g. licensing.example.com would get around that, but so far this hasn't been an issue at all.