turning on domain security