Always allow CNAME