Respond to comment re CNAME in TLSA query (as opposed to host or MX lookup)