this is hopefully temporary, until i can cleanup my trust-dns recursive resolver
--replace
--replace-fail