can you add additionally that the allow-recursion is in there too?

In these controlled tests, it is not going to be possible for that ip to be leaked from other things, but it might in the future.