[Bug 858407] support for DNSSEC