CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

...