This is the biggest issue with iCloud Keychain, and it's important that a solution is released to avoid continued user friction and temptation to leave the service. I run into this issue regularly, and the risk of overwriting login information as a result of naive subdomain handling is a big problem.