domain-key normal form