Actually domain: :all is a bad idea