ANY queries can result in an empty answer section, despite records having been found for the node, if the server thinks the zone is transitioning to secure but only DNSSEC types are found. This previously could cause an assertion failure.
Closes #901 (closed)