DNS-01 orders take their DNS server from the domain's automatic DNS settings, and those wouldn't save with an empty list of record types, so a domain that only needed DNS for certificates had to publish a record it didn't want (#304). The list may now be empty, in the validation and in the served schema, whose description says when to leave it so. Saving a domain with nothing to publish and no certificate to order afterwards no longer queues a DNS task that can only end as a failure. Fixes #304