users exempt from X domain retirement security key migration