Should external locations be organized by domain or environment in Unity Catalog?

We are redesigning storage credentials and external locations for multiple business domains across development, test, and production. A domain-first model seems easier for ownership, while an environment-first model may simplify operational controls. Which approach has aged better for larger organizations, and where do you draw the boundary between catalogs and external locations?