DNSSEC chain validator

Walks the trust chain from the root down to the target domain. A verdict of secure means RRSIGs validated against a trusted DNSKEY. insecure means the zone is unsigned. bogus means a broken or tampered chain.