rollback master-key from CNAME to A/AAAA since the CNAME cannot be processed by hetzner temporarily