bugfix: query incorrect under some TAs
bugfix: query incorrect under some TAs

In the case of a TA where AKI is omitted (RFC 6487), the query client
incorrectly invalidated some of the objects under that TA.

rhansen/rpstir,rhansen/rpstir,rhansen/rpstir,rhansen/rpstir,rhansen/rpstir