The timeout and notimp failures above are most likely due to mishandling of DNSKEY requests rather than EDNS.