previously, only root TA was considered

Function determining whether a NSEC3 record covers a name was wrong. The
case when the owner and next hashed name was wrapping over zero was
wrongly interpreted.

The test is failing because of address mangling performed by test
environment.

previously, debug messages were optional with -DWITH_DEBUG
now the debug messages are built in (unless compiled with -DNDEBUG), but
disabled by default

verbose output can be enabled by '-v' or '--verbose' CLI option
or interactively by 'verbose(true|false)' (or in config)

Query for A or AAAA cannot be currently validated because the test
server mangles all A and AAAA records.

Also fixed TIME_PASSES ELAPSE which ignored the overridden time.

The hard-wired root trust anchor was removed.