add apex capability to SOA to permit subdomains