DNSSEC option missing

I'd prefer to block these requests. I'm sure there was an option at one point, but it's disappeared. Can anyone else confirm? Please bring the option back, I'm fairly sure it's being abused, and there's no way to add it entries to your denylist.