add domain restrictions