workaround published for BIND8 and delegation-only