dns.dnssec

encode_rdata_canonical(rr) -> wire_bytes

Re-encode RDATA in canonical form (lowercased names, no compression)