Should private DNS be turned off?