Get the domain id for this storage.
This must match the authenticator configuration associated with the storage.
This must not be NULL.