allow @domain to be passed as part of a white/black-list, RT#20896