…with DNS_TE_SO_VERIFY, which better follows the pattern of tracing the mechanics of the query rather than the policy decisions, which are more subject to change and shouldn't be baked into an ABI