Alexey Chernyak

The above `if` statement shouldn't be changed, but I think there's an easy way to fix the failure that prompted this issue being raised by MiniDNS relying on the DNS...

> which will only set the AD bit if the entire chain is correctly signed. `AD` or `AA` bit. I'm not quite clear on how MiniDNS currently implements the [isAuthenticData()](https://github.com/MiniDNS/minidns/blob/master/minidns-dnssec/src/main/java/org/minidns/dane/DaneVerifier.java#L108-L110)...