Don't add dnssec info, to any query results, for non validating resolver...

Improve compatibility with devices that are not able to process +512 byte replies.