allow underscore in CNAME records

so that DMARC and SRV records can be delegated