Unsure about banned/permitted

Part of the idea behind the banned and permitted list is so that a server could implement it as a sort of simple whitelist/blacklist of who to serve resources to, and it would override any probabilistic calculation based on other parts of the PermissionProfile. The exact way to model this is something I am not sure about - I have used FOAF's Organization, Agent and Person, but am tempted to turn both properties into a datatype property with a string containing either the root domain (eg. "microsoft.com", "tommorris.org") or a regular expression. I am not sure about this, though. Just dumping this here, rather than in a big block in the vocabulary.