net.resolvers: Report DNSSEC validation errors instead of NoError Thanks Martin bringing this case to attention

exclude = {
	"^%./spec/";
}