layer/validate: don't try to find proof of DS non-existence in CNAME'ed answer for DS query

6 jobs for fix-ds-cname
in 75 minutes and 52 seconds and was queued for 0 seconds