move nisdomain into sudoers block