cli doesn't allow covert domain names

[ewust]

Providing a domain name causes some problems.

Tricky, because who should resolve the DNS for covert? If it's the client, then we need to warn people that we're going to resolve DNS locally of the provided covert (censors could detect this). If it's the station, then people can issue DNS queries from our station...? Seems bad.

We generally provide IPs for covert addresses normally, but it would be nice to let the cli resolve for development purposes (perhaps with an appropriate warning)