[sig-policy] DNNSEC signatures in reverse DNS zones now enabled