Added TYPE65534 record type so that zone scanning doesn't die upon encountering one.  Fixed DNSSEC signature verification.