remove spurious 'any' (thanks seth) plus clarify CNAME walking