What are some best practices organizations can observe when creating and maintaining domain policies?