Comment 4 for bug 1356682

The design then does not line up with how people originally were justifying the use of Domains. Domains need to be secured from each other by default. Since cloudpolicy is not the default file, we have a hole.

Admin can always request for a specific domain. In addition, we could provide "all_domains" as a filter that would explicitly bypass the restriction for an authenticated user, but Ithink that is probably a mistake: listing all users in a a large system is likeyl to cause memory exhaustion.