grc: domain-specific port keys