You are in the process of disabling DNSSEC for one of your Cloud DNS-managed zones. You have already removed the DS records from your zone file, waited for them to expire from DNS caches, and then disabled DNSSEC in Cloud DNS. However, users report that DNSSEC-validating resolvers cannot resolve domain names in the zone. What should you do next?