[dns-operations] Adding CNAME for the root domain issue

[Randy Bush]

>> if there is a cname, it MUST be the only RR at that label.
> There are well-documented exceptions (DNSSEC related rrtypes), but
> otherwise yes. </pedant>

point