check more data for sanity; properly support TLSA and DS records