add idna validate: -- can't be third chars