these records allow our ssh clients to use DNS lookups to validate host
key fingerprints.