Add comment about RRSIGDNSKEY not checked as described in the satin2012 paper, TODO to explain why.