DNS: Better handling of SOA when negative-caching lookups