Respect a requested PortalIP if possible

This will make DNS possible on a static IP.
@erictune and I waffled on this - I thought Forbidden made more sense, since no value will ever succeed in this case.