redirect app DNS requests when using CF Gateway

Some applications use their own hardcoded DNS servers. Using CF Gateway, can I rewrite these port 53 requests to use DNS that enforces our policies? I see that I can build a network policy expression where destination port == 53, and set an action that overrides destination IP & port. If this is all I'd need to do, what IP would I use for the override?