layer/validate: DNSKEY query is planned after delegation update

lib/layer/validate.c

@@ -730,6 +730,10 @@ static int validate(knot_layer_t *ctx, knot_pkt_t *pkt)
 
 		if (!qry->zone_cut.key) {
 			DEBUG_MSG("<= missing keys for new cut\n");
+			struct kr_query *next = kr_rplan_push(&req->rplan, qry->parent, qry->zone_cut.name, qry->sclass, KNOT_RRTYPE_DNSKEY);
+			if (!next) {
+				return KNOT_STATE_FAIL;
+			}
 		}
 	}