Code review comment for ~ahasenack/ubuntu/+source/bind9:disco-bind9-merge-9.11.5

Regarding the qa-regression-tests, I get 4 dnssec failures with the current version of bind in disco, and the same failures with the updated one:

9.11.4 (current in disco): https://pastebin.ubuntu.com/p/YDsd7sJbVs/
9.11.5 (this MP): https://pastebin.ubuntu.com/p/XbrmN5Y2G3/

Since it's the same tests that failed, it's no regression. I asked #security and #ubuntu-hardened if these are known failures.