readonly follows these domains