NSEC appears in the authority section.
Direct DNSKEY test passes.