I see where you're coming from, and what you're trying to do...I get it. If you have to go down that road, I might suggest having BOTH in use, the dns entry and a local entry. You're trying to make it as robust as possible, which is great, but you are sacrificing flexibility and losing out on some degree of recoverability. You need to balance the security/robustness/flexibility in everything.
--"Non Temetis Messor."
