Access control on domain controllers

Should fix #2