Merge !237: layer/validate: clear AD with optout NSEC3

Fixes #169.
3 jobs for master
in 1 minute and 14 seconds and was queued for 1 second