Reduce dns_dnssec_verify calls made checking for revoked trust anchor

We could be more smart about this and only call dns_dnssec_verify when the key is revoked and is in the set of trusted keys.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information