Check whether a user@domain payment address (BIP353) is correctly configured: resolves the DNS record and validates the full DNSSEC trust chain, locally, up to the root.