We set `Domain = cluster` on the master's /etc/idmapd.conf, but we aren't setting it in the various wwmkchroot templates.