Initialize srs_domain from srs.srs config property. Should probably always block unsigned DSN when signing all.