Fixup CNAME placement validation

CNAME's may have child records, but may not have sibling records

Change-Id: I50ffb37b20691424f5611dfdc2059536b8fd1688