The solution for us is total endpoint control. Our application endpoints have their own DNS root. :+ )