Add flag to include DNSSEC additional records in output

[secastro]

More than an issue, this is a feature request, if it doesn't exist.

Is it possible to add a flag that will save, as an additional record, DNSSEC-related records when the destination nameserver is doing validation?

We run a large-scale collection for a ccTLD, and saving the responses and the RRSIG records could allow us to validate those signatures offline.