dns resolution is still a wild west of security risks, can't believe kubernetes uses it as a crutch for service discovery, like what could possibly go wrong with trusting arbitrary dns servers...