Checks that there is a revoked key in the DNSKEY RRset then checks that only the correct number of DS records are produced.