Remove pointless string concatenations
Prefer configured trust anchors over fetched keys
Update parts of NSEC3 validation to today's unbound code
Limit validation failures in TXT record to 250 chars
Change misleading resource key name
Use parent domain when searching for the signer and qtype is NS or DS

Required to pass val_ds_afterprime