simple option to block canary domain lookups
Mozilla is using a canary domain to determine whether Chrome should use DoH by default [reference]. This domain can be suppressed by, e.g., configuring RPZ, but it might be useful to have a single configuration option to suppress it with less hassle.