(dig +edns +dnssec +bufsize=512 +norec +ignore dnskey $zone @$server) expect: status: NOERROR expect: OPT record to be present See RFC6891, 7. Transport Considerations