ignore wildcard ns records to resolve #6
support DS records for DNSSEC
Merge branch 'dnssec'