Sign the answer and authority section
Check truncation and set EDNS0 in return

Some DNSSEC fixes.