Cannot specify domain in alternative credentials for Risk Scan