MessageUtils.registerShutdownHook();
        int result = cli.doMain(new CliRequest(args, classWorld));
        MessageUtils.systemUninstall();

        return result;
    }

    // TODO need to externalize CliRequest
    public static int doMain(String[] args, ClassWorld classWorld) {
        MavenCli cli = new MavenCli();
        return cli.doMain(new CliRequest(args, classWorld));
    }

    /**

					//
					// Additionally also check if domain is updated/missing with more
					// entries, if that is the case we should update the
					// new domain entries as well.
					continue
				}

				// if domain IPs intersect then it won't be an empty set.
				// such an intersection means that bucket exists on etcd.
				// but if we do see a difference with local domain IPs with

    val value: String = cookie.value
    val persistent: Boolean = cookie.persistent
    val expiresAt: Long = cookie.expiresAt
    val hostOnly: Boolean = cookie.hostOnly
    val domain: String = cookie.domain
    val path: String = cookie.path
    val httpOnly: Boolean = cookie.httpOnly
    val secure: Boolean = cookie.secure
    val matches: Boolean = cookie.matches("".toHttpUrl())

 *  Fix: Do not honor cookies set on a public domain. Previously a malicious site could inject
    cookies on top-level domains like `co.uk` because our cookie parser didn't honor the [public
    suffix][public_suffix] list. Alongside this fix is a new API, `HttpUrl.topPrivateDomain()`,
    which returns the privately domain name if the URL has one.

  /**
   * Returns the domain name of this URL's [host] that is one level beneath the public suffix by
   * consulting the [public suffix list](https://publicsuffix.org). Returns null if this URL's
   * [host] is an IP address or is considered a public suffix by the public suffix list.
   *
   * In general this method **should not** be used to test whether a domain is valid or routable.

labels.advance_search_occt_default=Anywhere in the page
labels.advance_search_occt_allintitle=in the title of the page
labels.advance_search_occt_allinurl=in the URL of the page
labels.advance_search_sitesearch=Site or domain
labels.advance_search_timestamp=Last update
labels.advance_search_timestamp_default=Anytime
labels.advance_search_timestamp_pastday=Past 24 hours
labels.advance_search_timestamp_pastweek=Past week

cookie.search.parameter.secure=
# Max-Age (in seconds) for the search parameter cookie. Use -1 for session-only cookies.
cookie.search.parameter.max_age=60
# Domain attribute for the search parameter cookie. Set to the domain scope you want the cookie to be available on (e.g., example.com).
cookie.search.parameter.domain=
# Path attribute for the search parameter cookie. Typically set to "/" or the context path of the app.
cookie.search.parameter.path=/

labels.advance_search_occt_default=Überall auf der Seite
labels.advance_search_occt_allintitle=im Titel der Seite
labels.advance_search_occt_allinurl=in der URL der Seite
labels.advance_search_sitesearch=Website oder Domain
labels.advance_search_timestamp=Letzte Aktualisierung
labels.advance_search_timestamp_default=Jederzeit
labels.advance_search_timestamp_pastday=Letzte 24 Stunden
labels.advance_search_timestamp_pastweek=Letzte Woche

labels.advance_search_occt_default=Di mana saja di halaman
labels.advance_search_occt_allintitle=di judul halaman
labels.advance_search_occt_allinurl=di URL halaman
labels.advance_search_sitesearch=Situs atau domain
labels.advance_search_timestamp=Pembaruan terakhir
labels.advance_search_timestamp_default=Kapan saja
labels.advance_search_timestamp_pastday=24 jam terakhir
labels.advance_search_timestamp_pastweek=Minggu lalu

    }

    /**
     * Checks if domain services are enabled for Entra ID authentication.
     * Uses new entraid.use.ds key with fallback to legacy aad.use.ds.
     * @return true if domain services are enabled, false otherwise.
     */
    default boolean isEntraIdUseDomainServices() {