the krb domain is a site-specific value