No circular dependency between the domains

sheriff validate walks the domains along the consumes links, from each domain's header to the domains whose sections it names. Where the walk comes back to a domain it has already passed, the check refuses the change and names the domains along that circle.