postfix-2.11-20130608
Bugfix: When TLSA records are insecure, report that none are found.

We must return some usable records, or tag the RRset as unusable,
or else as not found.  Call msg_panic() if this is not the case.