* Fix verify NSEC3 denials. * allow for a secure trace if you use DS records as trust anchors * bugfix #313: trace on an empty nonterminal continuation.