Add ability to blacklist certain domains

[pbasov]

I'm tunneling through SOCKS to a bastion, but still require to login through SAML with my regular connection.

With current implementation - it's impossible to do so if your SAML provider in inaccessible through bastion host. Basically I'm looking for NO_PROXY configuration option.