pub fn validate_dns_suffix(input: &str) -> Result<String>
Validate a DNS suffix exactly as provided in config without normalizing it.