5219. [bug] Negative trust anchors did not work with "forward only;" to validating resolvers. [GL #997]