This allows per client configuration and improves DNS security by using an encrypted channel for DNS traffic.