One could hide the subdomain too (yes, I know there are cases where you have a different trust relationship depending on subdomain - but these are rare).