DANE/GnuTLS: filter TLSA records for usability