`kdig +tls-ca @199.58.81.218 example.org` succeeds, despite strictness
consider this command:
kdig +tls-ca @199.58.81.218 example.org
According to the documentation, this should not succeed because it needs to authenticate, but no authentication information was given.