Add tests for RRSIG direct and A record DNSSEC