[Resolve]
DNSSEC=allow-downgrade
# oder
# DNSSEC=yes