1. Adding a domain
To grant a user $USER some domain $DOMAIN, run:
domtool-admin grant $USER domain $DOMAIN
2. Removing a domain
To remove all configuration associated with a domain $DOMAIN, run:
domtool-admin rmdom $DOMAIN
This clears out DomTool configuration related to $DOMAIN and removes any reference to it from the actual configuration files used by real daemons. However, users' permissions to configure the domain are left untouched. You can remove those separately with domtool-admin revoke.
3. Managing admin-run domains
Every domain is thought of as owned by a user. By convention:
User domtool owns localhost, so you should edit ~domtool/.domtool/localhost for such purposes as adding local e-mail aliases.
User hcoop owns hcoop.net and sub-domains, so you should edit ~hcoop/.domtool/deleuze.hcoop.net, ~hcoop/.domtool/hcoop.net, etc., as appropriate. (hcoop also owns the portal, the wiki, and other "informational" services that are relatively low security.) Don't forget to use DOMTOOL_USER=hcoop when type-checking and installing your changes.