Detection of communication over DNSSEC covert channels