Issues that have not been solved yet

Default domain on login with current utilities is determined by trying an ordered list of roles selected by the context of the login program

EG ssh and /bin/login may therefore try contexts in a different order and assign a different default context to the same user

This may be over-ridden by a .default_contexts file in the user's home directory

Should ~/.default_contexts be writable by the user?