[Resolve]

DNSSEC=allow-downgrade