s4:dns_server: no-op dns updates with ACCESS_DENIED should be ignored