When multiple domains are in the
call chain, all must have permission