refine code, add DNSSEC related rr