This allows easier demoing/testing of ingress gateways, while still preserving the validation we have for DNSSANs