lib/dnssec: drop incorrect `requirement` and comment

I don't think this can happen on correct records, due to the way that the root zone is. But we've seen this assertion happen in real life, and attackers might be able to misuse it to cause crashes.