When OPTOUT was in use we didn't ensure that NSEC3 records for orphaned empty-non-terminals where removed. Check if there are orphaned empty-non-terminal NSEC3 even if there wasn't an NSEC3 RRset to be removed in dns_nsec3_delnsec3.
When OPTOUT was in use we didn't ensure that NSEC3 records for orphaned empty-non-terminals where removed. Check if there are orphaned empty-non-terminal NSEC3 even if there wasn't an NSEC3 RRset to be removed in dns_nsec3_delnsec3.