Support for DNSSEC-validated lookups and TLSA RRsets.