(updating PR #571 ) Require DNSSEC for CAA and DCV lookups using an RFC reference. Obsoletes PR #571 and branches off of the latest commits on main instead of Clint's branch since Clint's b...