the concern is a potential security hole? how does the domain get into the kwargs?