dns_server: Avoid ldb_dn_add_child_fmt() on untrusted input