Extract the no DS proof, if any, from the referral and save/validate it.
Insecure referrals contain a no DS proof. We are currently not using it and instead are make DS queries and validating those. Extracting the no DS proof should resolution for data in insecure zones.