Why can’t mozilla roll out a encrypted dns service in a form of a browser setting or plugin? Does the browser not have control over how the dns is resolved ?