> (Separately, OS X's stub resolver has some neat tricks. e.g., using /etc/resolver/<domain_name> to route DNS requests for a particular domain to a specific name server.)

I was about to give up and install dnsmasq locally to get around a VPN-related issue. Thanks for the tip!