options {
	query-source address 10.53.0.2;
	notify-source 10.53.0.2;
	transfer-source 10.53.0.2;
	port @PORT@;
	pid-file "named.pid";
	listen-on { 10.53.0.2; };
	listen-on-v6 { none; };
	allow-transfer { any; };
	recursion no;
	dnssec-validation yes;

	/* Keep the order of RRSIGs in the response static. */
	rrset-order {
		name "example." order none;
	};
};

zone example. {
	type primary;
	file "example.db.signed.malformed";
};

zone truncated.selfsigned. {
	type primary;
	file "truncated.selfsigned.db.signed";
};

include "trusted.conf";
