got insecure response; parent indicates it should be secure
options { dnssec-validation auto; };
no valid RRSIG resolving 'hostname.company.com/DS/IN': 192.168.0.1#53 broken trust chain resolving 'hostname.company.com/A/IN': 192.168.0.1#53