Update tests
Change default to NSEC3 opt-out