We should block operations that we know shouldnt be allowed. Some of these are: * Only 1 SOA record * CNAME's at the apex