Function remote_server 

fn remote_server<'a>(
    services: &Services,
    server: Option<&'a ServerName>,
) -> Option<&'a ServerName>

The server a directory query is routed to, when that server is not us.

Routing the query and masking its failure both read this, so the set of requests that reach a third party cannot drift from the set whose errors are masked.