Is there any option to avoid having an open DNS resolver if using the built in CoreDNS functionality? I could of course create a firewall rule with all hosts in networks, but this is a bit annoying and not very flexible.