I would add that administrators have access to domain parameters. In the interest of security, access to domain parameters should be limited to two at most. Because I want others to be able to add pages (and popups) I have to give them admin privileges. But it their accounts are infiltrated, it's curtains for our domain parameters.
Dan