test that dig fails with invalid domain
serial: pull the SOA from the first server so don't have caching issues