No need to always request DNSSEC signatures.
We currently request signatures https://framagit.org/bortzmeyer/mastodon-DNS-bot/-/blob/master/bot.py?ref_type=heads#L72 but we don't use them and they may make the message too large. May be sending just the AD flag? Or make it an option?