the Authoritative section, not the Answer section. This fixes the acme-dns validation for the lego Let's Encrypt client.
