Solution: if #DNSSEC signatures don't validate, retry without DNSSEC validation...Once time is set, retry with validation always on.#security #FOSDEM