I just realized that a previous admin turned DNS scavenging on for all zones on one of the DCs, including the _msdcs zone. It's been this way for a while and things are fine, but I can't imagine that this is best practice.
Is there any danger to scavenging the _msdcs zone?
Should I make it so that zone is not scavenged?
Could scavenging have broken anything in that zone that I'm unaware of at this time?