RFC 8198: Aggressive Use of DNSSEC-Validated Cache

Implementing this would probably require some changes in the cache, but I think it will be worthwhile as it creates less work for resolver and less work for authoritative.

Closed by: !422 (merged)