oo-admin-ctl-user shouldn't be setting allowed_gear_sizes on domain yet
Capabilities validator should still be called