fix SERVFAIL in *FORWARD modes with certain CNAME setup
It failed on a CNAME to a sibling name that's a zone cut. Fixed by a minimalistic approach - tweaking the conditions to always ask each CNAME step separately when forwarding.
Fixes #614 (closed)