unbound_insecure can disable DNSSEC for all domains processed.