a careful reviewer might note that the cache check completely ignores the `strict` flag. this was because i'm trusting invalidation to work which means that all domain saves go through `.save()`. I did a cursory check of that and didn't come across anything that seemed scary.