For new clusters only, default to dns=none on hetzner and
digitalocean.
Hetzner previously used dns=private (with the same behaviour), but
dns=none is more specific.
DigitalOcean previously defaulted to peer-to-peer gossip, but dns=none
is simpler and requires fewer permissions.