[Skunkworks] DNSSEC validation