DNSSEC doesn't do encryption. This is why DNSSEC isn't censorship-resistant.
If you want encrypted DNS, that's what DNSCurve does.