No DNSSEC validation message if NXDOMAIN
If the name does not exist, you get a NXDOMAIN (normal) but not the "[Authenticated by DNSSEC]" even if the non-existance was validated.
Not obvious to fix: when NXDOMAIN is raised by dnspython, there is no message to check the response flags.