Updating cryptographic key binding new domain origin