Improve output
Resolve addresses locally to verify they match reality
Refuse link-local addresses
HACK: what to do if dns server is not available?
Interpret timeout as absense
Merge adding and verifying ipv6 addresses. Introduce ref-counting
HACKY: work around ddos protection by pacing our-self when updating RRs
Reduce default TTL. The load isn't killing us, and we won't have many hits in the removed cache timeframe