pdnssec check-zone improvements, fixes #684