Expanded more on dnssec-validation option