[pawal]

In practice internal only DNS names will always leak to external resolvers in one way or another. Pretending otherwise is very naive.