I would prefer an option to lock the host which is used with xmpp-web. This way I could make sure that just users from my xmpp server are connecting. Jappix implemented this very well.
Choose whether to allow users to login to the XMPP server they want or not.