don't deploy CNAME until DNS propegates