Add dnssec as extension