I wrote:
In that case, there's no authentication record in the DNS
s/authentication/authorisation/ Sorry, I was thinking about something else.