The prober (collect.go) was calling inferApexDNSKEYStatus during
zone parsing, effectively making a SECURE/BOGUS judgement inside the
collection phase rather than the evaluation phase. The DNS-rcode
fallback (z.Status = z.DNSStatus) was also applied at parse time.
