You can limit that by deploying CAA records for your domain in DNS. All trusted CAs are required to respect those records.