r10632: clarification of 'security=domain' note