pubkeys added to -all should work for any domain