NextDNS CLI vs DNSFilter (on Merlin RT-AC87U)

I have a `config` set on my RT-AC87U running Merlin binding various MACs to NextDNS configs. But they don't seem to work.

I thought it might be conflicting with the DNSFilter function, so I turned that off, but clients still show "This device is using NextDNS with another configuration. This device is currently using Router" -- where "Router" is the 'default' config (i.e., `config 4xxxxf` without an IP) -- which is the last config line when I run `nextdns config.`

How can I troubleshoot this?

If I use CLI do I have to disable DNSFilter?

Thanks!