Implement admin password recycling
Unless you take special measures the ns prefix should also be the auth domain