Require DNSSEC.