Comment by CAP_NET_ADMIN

I'm wondering if they thought about DoT, DoH and DNSCrypt.