bind-add-zone: lock reworked. caller of createDomain have to take lock