validate: fix a typo leading to lower rank

The authority records weren't marked with _INSECURE rank and remained
with a *lower* one.  That could lead to them not being cached,
effectively.