====== Zero Trust DNS ====== netsh ztdns show state (or clientcert, exception, server, trustedca)