DNSSEC validator

Checks for a DS record and whether the chain validates (via the resolver's Authenticated Data flag).