Validate Ooops.
diff --git a/src/dnssec.c b/src/dnssec.c
index 089d1a5..8a887ea 100644
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -853,7 +853,7 @@
if (recp1->addr.ds.keylen == (int)hash->digest_size &&
(ds_digest = blockdata_retrieve(recp1->addr.key.keydata, recp1->addr.ds.keylen, NULL)) &&
memcmp(ds_digest, digest, recp1->addr.ds.keylen) == 0 &&
- validate_rrset(now, header, plen, class, T_DNSKEY, name, keyname, key, rdlen - 4, algo, keytag))
+ validate_rrset(now, header, plen, class, T_DNSKEY, name, keyname, key, rdlen - 4, algo, keytag) == STAT_SECURE)
{
valid = 1;
break;