Having an A-record and a CNAME-record in the tests led to a confusion that dns providers support such configurations. This change avoids that confusion by putting only compatible records for the same domain name in the tests.
This makes the dnsprovider usable in more scenarios, and it also solves some TODOs in the federation code.