Good idea! It definitely would be undesireable for random people to jump into domains if the domain creator intended to only share the domain with a small intimate group.

Maybe something as simple as a generated password displayed upon domain creation will suffice. Will add this to the feature requests.