Can lemmy use a different subdomain for authentication?

Unless it does, lemmy.zip is behind cloudflare and all of the passwords are going through a different entity, whether users like it or not.

I would rather not.