And if one clicks on the item name for a listed vault item that does not have a URI match (i.e., an item not listed among the “Autofill Suggestions”), should it still autofill (to provide a consistent UX), or should it instead do something else (to avoid the risk of leaking credentials to a phishing site)?