When dnssec was designed there where no validators

remove this.
We focus on nxdomain not offline signing techniques
Add my own ref