fix(dns): Fix DNSSEC validation

After some investigation it seems that prefetch causes some issues with
DNSSEC it seems to drop the ad flag on a refresh. Therefore it's
disabled for now.