Issuance authority and DNS delegation

Issuance Policy
3

Ownership != authority.

I say if user X has authority over userx.github.com, the owner of github.com shouldn’t be able to get a cert for userx.github.com.