1.4.4 enforcer fixes

3 minor fixes for the 1.4.4 release: OPENDNSSEC-429, 576 and 532.

I think review by the Release Manager should be enough?