diff --git a/etc/config/config.docker b/etc/config/config.docker
index 7bec09881a6e269135c67e2c9d6b1d3d25edcebf..9f27c9341569c90d2279894ce52834373dac88af 100644
--- a/etc/config/config.docker
+++ b/etc/config/config.docker
@@ -64,6 +64,7 @@ function debug_mode(qname, qtype)
 		resolve({
 			name = qname,
 			type = qtype,
+			options = {'DNSSEC_WANT'},
 			finish = function(pkt)
 				-- delay exit after packet is finished
 				-- to prevent us from losing policy.DEBUG finish callback