Make ns3 mirror the "root" zone from ns1 and query the former for a properly signed record below the root. Ensure ns1 is not queried during resolution and that the AD bit is set in the response.
Create the basic files comprising a system test and define a few helper functions which will be useful when testing mirror zones.