log ip adress of remote
add dnssec query statistics
add secure-all-zones and disable-dnssec-for-all-zones to pdnssec
return NOTIMP for direct RRSIG request
no tc for direct rrsig query