make sure valid_domains is a superset of owners