prevent extra domain entries from sneaking in