nit
note how and why we accidentally validate unknownalgorithm.bad-dnssec.wb.sidnlabs.nl. right now