Ensure we enforce the various rules for CNAME records

Change-Id: Ib77c1364997b23e4d766b8017eb26a1ceeb1217f