Clarify that private_interfaces="*" will not forward the root zone.