set AA on CNAME into referral, fixes #589