kdig: add TSIG verification for the first AXFR reply message

NOTE: Full verification will be added in the next release.

refs #2137

Change-Id: I092a8caf1640b5221815051e5cda1d1ec02e7098