As we move to simplify the control options for consumers, from 3 options (Always, Ask, Block) down to 2 (Ask, Block) it will be necessary to give Enterprises and (potentially) power users a way to do have something functionally equivalent to Always allow.

To support equivalent functionality we could add support for universal wildcards (i.e. "[*.]" w/ no domain suffix) to the Flash exceptions.  The configuration could be limited strictly to the policy(1), for Enterprise admins, or it could be added to the UI, for consumer users.

My inclination would be to only support the Enterprise case, since that will be a blocker to shipping a unified setting, but I'm open to both.

(1) - https://www.chromium.org/administrators/policy-list-3#PluginsAllowedForUrls