allow domain cpuctl_device:dir search;