Don't set SOA when it shouldn't have changed; fix tests

"Shouldn't" is not the same as "can't". DO NOT change a Domain's `soa`
field manually.