[amaccuish]

Ahh I see. So it's a per domain thing, and you can't restrict more granularly. That's a shame.

[schmonz]

I haven't experienced a need for more granular restrictions. Can you give an example of a problem it would solve?