make reverse answer non-auth

I'm not sure what to do with DNSSEC, make these answers non-auth, so
we at least don't have to sign them.
some more updates