kresd failed to validate transition to insecure zone on final name in some circumstances
Based on !604 (closed) from @vavrusam
Transition to insecure zone on final name (e.g. wifi.kabel-deutschland.de
), it will never try to fetch DS to prove the transition, but keeps asking for RRSIG from the child zone instead.