RE: how many roots must DNS have before it's considered broken (Re: ISP network design of non-authoritative caches)