Required by TCP queries retrying query on REDHAT.COM VPN, which offers too many SRV records to fit into reply without EDNS0. That means length of answer >512 bytes, as used by kinit implementation.
