PR60X provide "Secure DNS" proxy for attached LAN devices

Secure DNS is becoming one of the top privacy concerns for consumers.  Trusting your ISP DHCP provided DNS severs is well, unhealthy.

Providing a "Secure DNS" proxy on the PR60X would offer consumers an improvement for privacy.  The PR60X should

1. identify "clear text" DNS requests from LAN attached devices
2. Convert the request to "Secure DNS" of the consumers protocol of choice (DoH/DoT/DoQ) and resolver of choice (Google/OpenDNS/CtrlD/Etc.).
3. Forward the converted request to the WAN.
4. Convert the "Secure DNS" WAN response to "clear text" response.
5. Return the "clear text" response to the LAN attached requestor.

This could certainly elevate the PR60X as desirable choice for many MSP/SMB/etc.

Certainly much less expensive alternative than a setting up redundant PiHole servers!