protection-domain-mapper