Check ANY queries like a positive response

Except that the NSEC(3)s may also be in the answer section.
Check that all RRSIGs have the same label count