https://5dok.org/document/yev3edk1-domain-driven-security.html