Test not setting AD bit for answer which contains proof of nonexistence of NS record using NSEC3 with opt-out.