iterator already checks this and also chain length,
however these checks were omitted in the rrcache
CNAME unroll loop