Irvine in the RFC conversation:
We can restrict DNS entries if we wish, it is an implementation issue
for sure. Good to get community feedback on this one. Personally I think
we should restrict to 3 at a time (so require a delete of an old one to
create a new one after that)