Encrypted DNS requests via proxying to a trusted machine with Policy options for when this fails.