domain security problem