Add a utility function to resolve CNAMEs in verified RRs