dnssec-coverage was improperly ignoring some zones