Still, the initial package is meant for the infra of the outer domain. Sure, the real payload will be billed to the inner domain owner, but not the initial handshake (and usage of keys etc)