+extern type your_domain;
+{{A domain that you're allowed to configure}}
+
+extern type your_domain_host;
+{{Some host (as a fully-qualified domain name) in one of your domains}}
+
+extern type node;
+{{The name of a server controlled by domtool}}
+
+extern type user;
+extern type group;
+{{UNIX users and groups}}
+
+extern type your_user;
+extern type your_group;
+{{UNIX users and groups that you're allowed to run as}}
+
+extern type your_path;
+{{A filesystem path that you're allowed to use.
+ The set of permitted values is generated from a set of roots by closing it
+ under the subdirectory relation.}}
+