Add domain option to ferm::rule