> Is this an expected behavior or an issue with my current version? I
> couldn't find any info about this.
CNAME and other data is expressly forbidden per RFC. [1] As every zone
MUST have SOA and NS records, a CNAME at zone apex is forbidden.
-JP
[1] Exception: DNSSEC data