add a 'redirects' feature in web/custom.yaml
for .fund domains use RSASHA256 DNSSEC keys