allow '-' in dns names