So having checked further, it seems the message for a non master domain isn't
reflected in the UI, except until its master domain is also deactivated, with the checkbox
ticked. The message is correctly logged in the engine.log, so will use that for
validation.