2 layer private domain registration