- Fix that auth-zone, and RPZ zones, do not allow out-of-zone

records. These are records that are not under the zone apex.
  The out-of-zone records are dropped from the zone contents.
  Thanks to Qifan Zhang, Palo Alto Networks, for the report.