Right, if would be needed to use the default if the option was explicitly set as nil in the datastore?  Is no domain treated differently than always using WORKSTATION?  Isn't the default domain different on different versions of Windows? Or does the difference not happen for this use case since it's always the same for web auth usage?