Hijacking not fully avoided when clients use own DNS?