relativize + dnssec_order settings