option for ldns-read-zone to strip/show occluded data