actually make onlyif/unless work...
restrict permissivedomains usage to RHEL > 5