Added clarification for dnssec-validation config