[knot-dns-users] should NSEC3 be default?