SPF: fix looking at RRs when dns lookup does not return success