DNSSEC: DS records work under tinydns now