Adding a runtime step on a domain profile resource is wrong. Currently, the kernel rejects this (see WFCORE-2849) which means you can't add a jmx audit logger in domain mode. That would make this a Blocker, but in WFCORE-3217 I'm going to relax the kernel behavior. Still, this should be corrected.