Default policy for new dnssec04 messages.