DANE: do not override a cert verify failure, in callback. Also fix some test mistakes