Also grant root access on the domain because that does work, even though we are connecting to db.domain?