Add test to validate NODATA on a query to an ENT
Correctly handle islands of trust consisting of DS records
Treat delegations with only unknown algorithms as insecure.

This also treats RSAMD5 as unsupported as defined by RFC 6944.