Zero Trust DNS

netsh ztdns show state (or clientcert, exception, server, trustedca)