We had no idea until JUST NOW that you can’t use a CNAME as an authoritative name server; it’s totally got to be an A record.