>For example give a marketing agency authentication to claim the domain on social media but nowhere else.
How does it prevent them from claiming it elsewhere?