- Now a domain must be picked before a policy