this could happen if the query contained a CNAME with AA=0, or missing mandatory DS in previous NS query