notify messages from the designate worker are sometimes rejected by tripleo deployed bind instances as the worker sometimes use a source address that is not on the allow-notify list in bind configuration. So far this has only been noticed in IPv6 deployments.