the only other path into the idna crate, according to Cargo.lock, is the url crate, which is only used in trust-dns-proto for CAA record data, which I'm also not using in any of my code paths