remove dnsZoneEntry from restricted attributes to match config on db.d.o