Something that is missing from the CLI is something like a `--cors` flag. I have some changes locally that I should make a PR with soon...