Ignoring DNSKEYS with bit SEP off in query tests