[ssu] Introduce rnd default domain, add workaround for keeping old rnd domains intact on upgrade