resolve: adjust srubbing of DNSSEC RRs from answer

My interpretation of the RFC is that if you ask for a particular type,
your interest is restricted to ANSWER section and matching QNAME, etc.
(Hopefully I'm not being a bit too creative here.)
4 jobs for scrub-rrsig-RRs in 78 minutes and 50 seconds (queued for 2 seconds)
latest
Status Job ID Name Coverage
  Build
passed #13265
docker linux amd64
build:linux:amd64

00:01:03

 
  Test
passed #13267
docker linux amd64
deckard:linux:amd64

00:00:30

passed #13268
docker linux amd64 allowed to fail
respdiff:linux:amd64

01:17:46

passed #13266
docker linux amd64
test:linux:amd64

00:00:19