Well... I currently just use the Domain Users account. I could just assign Domain Users to the DB_DDLADMIN role. I don't see much harm in that.