OPT records aren't filtered out for non-DNSSEC requests

[ainar-g]

Compare:

dnslookup 'example.org' '8.8.8.8'

dnslookup result:
;; opcode: QUERY, status: NOERROR, id: 64559
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;example.org.   IN       A

;; ANSWER SECTION:
example.org.    2820    IN      A       93.184.216.34

vs.

dnslookup 'example.org' "$ADGUARD_HOME_ADDR"

dnslookup result:
;; opcode: QUERY, status: NOERROR, id: 1356
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;example.org.   IN       A

;; ANSWER SECTION:
example.org.    11485   IN      A       93.184.216.34

;; ADDITIONAL SECTION:

;; OPT PSEUDOSECTION:
; EDNS: version 0; flags: do; udp: 4096