//sbin/dnssec-coverage