As this is not set we are given a resolver that talks to the local DNS server and this causes conflicts to be flagged that do not exist
just add :resolver => domain.resolver. This is correctly done for the A record definition a few lines lower in the code.