https://www.johndball.com/dnssec-trust-points-missing-from-dns-manager-on-server-2016/