Check that we don't accept overrides for A records from out-of-bailiwick
servers.