[dnssec] fix segfault in dnssec_kasp_close()