these are not useful for dnssec synthesis as they can result in false NODATA responses and just consume cache memory