Restrict Login Email with Google OAuth2.0 to Specific Domain Name

*Description*:
Hi,

It would be nice to have domain restrictions like [hd](https://developers.google.com/identity/openid-connect/openid-connect#hd-param), when using [SecurityPolicy](https://gateway.envoyproxy.io/v1.0.1/tasks/security/oidc/), or please let me know how to do it in the current setup.

For now situation is like this: after enabling OIDC with Google OAuth 2.0 Client IDs, it allows all gmail accounts to login, not only your organization domain.