How to get Hotlink Protection but allow one domain through?

I want Hotlink Protection but with one domain allowed through. I turned off Hotlink at the top level, then set up a configuration rule to turn it on for

But the images from my site don’t show when I go to that page. I can, of course, just disable the protection entirely. But I’d like to keep everyone out, except for this domain.