Opportunistically use dnssec-trigger