Specific domains have the advantage that they can contain those privileges needed by the domain, and no more. As there are no other application implementations using the specific domain, the privileges can be tailored to the needs of the application.

In certain situations though, it might be beneficial to automatically generate the types together with the basic permissions. Generating types is done through templates (rather than interfaces, although the underlying implementation of interfaces and templates is quite similar). The approach and development method is aligned with interface definitions and should pose no difficulties for developers to understand.

An example to consider with templates would be to automatically create system cron job domains for individual applications. Through a template, we can automatically create the domain, executable type, and temporary resource types as well as properly document the interactions of that...