authorization key domain