[bcop] BCOP on DNSSEC