proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

[Mark Andrews]

	This sounds like you have configured 'must-be-secure ".";' which
	disables secure to insecure transitions within the must-be-secure
	namespace.

	Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org