fix_iterator() bug causes DNSSEC NXDOMAIN responses to be broken

A bug in the fix_iterator() causes the iterator to point at a node/name that is not the predecessor of the name that was being looked up.

Closes #4659 (closed)