[nznog] DNSSEC validation at Spark NZ