validate: NSEC proofs can confuse NXDOMAIN with NODATA
The records get into aggressive cache that doesn't suffer from this bug, so only the first answer can be wrong. So far I can see no security implications of exchanging NODATA with NXDOMAIN.
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information