2 Feature Requests: Validate the DNSSEC entries of the domains specified by --resolver-check. Also an option to only use dnssec aware servers.