always add SOA to apex matching NSECx records
post 1dfd8ad SOA can live outside the records table
Merge pull request #1180 from mind04/nsecx

always add SOA to apex matching NSECx records