### A server lacking a TLSA, dane required (should fail)
### A server lacking a TLSA, dane requested only (should fail, as the NXDOMAIN is not DNSSEC)
### A server where the A is dnssec and the TLSA _fails_
### A server lacking a TLSA, dane required (should fail)
### A server lacking a TLSA, dane requested only (should fail, as the NXDOMAIN is not DNSSEC)
### A server where the A is dnssec and the TLSA _fails_