allow _ in zone names

example use case: _report._dmarc.example.com