Tweak.
diff --git a/src/rfc1035.c b/src/rfc1035.c
index db98c62..2e7b46c 100644
--- a/src/rfc1035.c
+++ b/src/rfc1035.c
@@ -1544,7 +1544,7 @@
 	}
 
 #ifdef HAVE_DNSSEC
-      if (qtype == T_DNSKEY || qtype == T_DS || qtype == T_RRSIG)
+      if (option_bool(OPT_DNSSEC_VALID) && (qtype == T_DNSKEY || qtype == T_DS || qtype == T_RRSIG))
 	{
 	  int gotone = 0;
 	  struct blockdata *keydata;