Your organization uses a Shared VPC architecture. Owners of service projects want the ability to independently manage their own Cloud DNS private zones within their respective service projects. At the same time, workloads in all service projects must be able to resolve private DNS zones created in other service projects. You need to design a solution that satisfies both requirements. What should you do?