Title: #426: DNSSEC: forwarders validation improvement
I was thinking about it and I disagree. Checking forwards zone behaves
differently than check for global forwarders. The validate
`_dnssec_zone_forwarder_step2` is called aginst an IPA DNS server, so there
shouln't be that issue as we know how bind is supposed to work.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code