DNSSEC - added order of ops