Write policies based on address domain, not stripped mx-domain