Check DNSKEY to DS consistency

See #4