pdnssec: check-all-zones detect zones without SOA record, and check all records in a zone (including disabled ones)