Enable ALLOW FROM in X-Frame-Options

We need to iframe some of our Marketo landing pages into a platform on a different domain, but are unable to because the X-Frame-Options only have DENY or SAMEORIGIN values. I suggest opening this up to specify ALLOW FROM to allow us to specify the domains where we can allow iframing.