MatchAddressLimit internally copies metadata and sets DNSResponse, making the prior assignment in the closure unnecessary.
local