The plan is to keep the world at bay by never recording it in the DNS root – like many already do with a subdomain for an intranet