DNSSEC: fix key checking in server