Ability to add a domain against a user to allow or block access

This will allow flexibility as well as scalability. Minimizing the need for a separate policy for those unique exceptions.