DNS secure only issue

Hi,

I have set all my DNS forward lookup zones to Dynamic secure only but I can still add insecure records using some vulnerability security tools.

What else would I need to check if I want to stop non secure records from being added?

Many thanks