Avoid 'bogus' when not DNSSEC detected forgery