Yeah, I definitely see why curl, carbon_black, and aws ought to be extensions -- for windows domain user/groups, I think it's a bit less clear since that is not a third party vendor, and the table maps directly to an OS/platform feature