DANE/GnuTLS: split verification of mixed sets of TLSA records by usage