Apple profile not working on Wi-Fi after enabling DoT+DNSSEC

Hello, I have an ASUS Router and I noticed our apple profile do not work any more after enabling strict DoT with DNSSEC

I believe I need to specify the validation parameters as I did for my personal DNS endpoints:

The weird part, it's that DNS resolution from the MacBook with profile installed works. It's only the iPhones (I haven't tested the iPads, but a wild guess tells me they won't work).

Any idea?

Thanks!