More restrictive permissions on domains and domain members