experiments with filtered DNS, ODOH, TLS, opportunistic/strict, etc