running without any trust anchors leads to insufficient caching
RR ranks are confused: some records get cached with KR_RANK_TRY
, but that's insufficient for using in answers – at least KR_RANK_INSECURE
and that would be the correct rank in this case IMO.
It's a low-priority configuration for us.