Testing for DNSSEC with our unbound tutorial at https://docs.pi-hole.net/guides/dns/unbound/#test-validation currently fails

dig fail01.dnssec.works @127.0.0.1 -p 5335 should return SERVFAIL but instead returns NOERROR